Cisco IOS type 7 password decryption - router password cracking - CiscoHQ

CiscoHQ · 12-31-2007, 12:24 AM

You will need access to a router

Turn on type-7 encryption for local passwords and create a test username

Code:

Router1(config)#service password-encryption
Router1(config)#username testuser password !@&*^&*^$#

Next show the created username with the show running config command

Code:

Router1(config)#do show run | include username
username testuser password 7 <encrypted string>

Next create a key chain and enter the type-7 encrypted password as the key string

Code:

Router1(config)#key chain decrypt
Router1(config-keychain)#key 1
Router1(config-keychain-key)#key-string 7 <encrypted string>

Now the show command does the decryption

Code:

Router1(config-keychain-key)#do show key chain decrypt
Key-chain decrypt:
    key 1 -- text "testuser:decyptedpassword"
        accept lifetime (always valid) - (always valid) [valid now]
        send lifetime (always valid) - (always valid) [valid now]

cf- kevin · 05-14-2008, 12:20 AM

wow, never seen that before